https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-21T20:12:21.056350+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-109681 fkie_cve-2026-109681 2026-10-21T20:12:21.073405+00:00

The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rogue FTP server can specify any IP:port in the 227 Passive Mode response, causing the operator's machine to open a TCP connection to an arbitrary host.

 https://db.gcve.eu/vuln/ghsa-jjr5-6c72-j9r9 GHSA-jjr5-6c72-j9r9 2026-10-21T20:12:21.073484+00:00

The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rogue FTP server can specify any IP:port in the 227 Passive Mode response, causing the operator's machine to open a TCP connection to an arbitrary host.